CVE-2008-4397
Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary commands via a .. (dot dot) in an RPC call with opnum 0x10A.
- EPSS
- 81% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:arcserve_backup
- broadcom:business_protection_suite
- broadcom:server_protection_suite
- ca:arcserve_backup
- ca:business_protection_suite